Vulnerability Description
swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
CVSS Score
5.0
MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ncipher | Ncipher | All versions |
References
- http://active.ncipher.com/updates/advisory.txtPatchVendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.htmlPatchVendor Advisory
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
- http://active.ncipher.com/updates/advisory.txtPatchVendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2000-12/0152.htmlPatchVendor Advisory
- http://www.osvdb.org/4849
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5999
FAQ
What is CVE-2001-0081?
CVE-2001-0081 is a vulnerability with a CVSS score of 5.0 (MEDIUM). swinit in nCipher does not properly disable the Operator Card Set recovery feature even when explicitly disabled by the user, which could allow attackers to gain access to application keys.
How severe is CVE-2001-0081?
CVE-2001-0081 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2001-0081?
Check the references section above for vendor advisories and patch information. Affected products include: Ncipher Ncipher.